medusa fails on mssql module with Windows authentication mode

[jmk-foofus]

medusa fails on mssql module with Windows authentication mode

[jmk-foofus]

The MSSQL module only supports native SQL authentication. Windows integrated authentication support would be great, but I do not have plans at this time to implement it.

[axzhandul]

@jmk-foofus -- thx for the update, I totally understand, and if I had limited resource, it probably makes sense. However, for anyone that might find themselves with the bandwidth (er....the mythical "copious free time") to implement, I can give maybe a use-case which would make Windows auth support all the more valuable.

I'd imagine that most use of the medusa mssql module is employed in the direct effort of trying to crack the mssql server itself. However, in offensive ops which might require stealth (red teaming) trying to crack AD account credentials by proxying brute force through mssql can fly under detection radar, b/c alerts might be tuned to ignore auth attempts coming from the mssql server. So my take is that supporting Windows auth may be a double-bonus.

@jmk-foofus -- I dug into the source at the time, but if there's any recommended starting point you know for looking deeper into this, let me know, and I'll look into it, if you'd be open to a contribution. In any case, I really appreciate the response. Keep up the good work!